
Error: rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier: 19JhRimmDuN6ua6augapnvUBZSqpuk3gybOj0KeuGco=
Subject key identifier: C4:16:E4:85:B1:DC:9F:B9:C3:EA:6B:44:FC:37:11:0F:5E:74:FB:88
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer: /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial: 01B4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number: 01B1
Signing time: Sat 14 Nov 2026 05:08:35 +0000
Manifest this update: Sat 14 Nov 2026 05:08:34 +0000
Manifest next update: Mon 16 Nov 2026 05:08:34 +0000
Files and hashes: 1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: NIeltxYVDZZttvzrw62oskiSEUF9bD3q2Xk35QJrOcE=)
2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Nov 2026 00:08:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Validity
Not Before: Nov 14 05:08:34 2026 GMT
Not After : Nov 16 05:08:34 2026 GMT
Subject: CN=6af7ecd3-b345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c7:40:25:20:0c:a4:18:49:b0:4b:0a:9d:7b:
52:31:c6:f0:10:c3:a1:79:33:16:3d:bb:7a:49:cf:
0b:cf:5a:fd:92:27:2f:76:8b:db:46:d7:48:cd:2b:
3c:03:0e:56:42:ea:85:2c:73:76:a7:02:18:ca:9d:
57:b9:1f:74:12:61:05:62:9d:69:d6:51:1a:a2:8a:
bf:c0:cd:f5:ff:4f:3c:c5:34:0b:ff:9a:7e:7e:02:
8b:4f:c0:d4:e9:9f:2f:45:a2:f6:b8:18:1c:17:0d:
32:91:50:b5:39:6b:81:73:e9:35:bc:10:21:4f:08:
14:b6:87:21:42:f8:7f:6f:e8:78:31:02:42:d9:a4:
f8:f0:50:70:af:76:2b:3e:0f:93:8a:32:c1:71:f0:
ad:cf:c2:59:b2:9a:13:49:03:a3:05:b4:7a:4d:b5:
1f:f0:51:c4:4e:3f:d4:11:30:4e:bd:bd:99:1b:6e:
7d:ea:4a:60:2d:97:66:1a:0a:fa:06:9e:fc:e4:ca:
df:20:83:c6:ea:bb:20:9d:78:90:b0:ce:eb:d2:6e:
92:3b:38:7d:46:11:5a:56:66:7c:9f:c1:92:d1:0a:
b1:9b:0e:71:4e:a9:77:0a:15:4b:3a:a7:31:bb:48:
ce:af:1c:36:76:70:1f:2a:be:1b:d8:1f:39:0b:30:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:E4:85:B1:DC:9F:B9:C3:EA:6B:44:FC:37:11:0F:5E:74:FB:88
X509v3 Authority Key Identifier:
keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:47:43:46:4d:f8:16:51:1a:35:98:e7:3d:d8:d2:d2:f3:1b:
eb:ed:e8:37:61:01:9f:5e:b4:56:a9:22:d9:67:c8:5f:ff:2f:
3f:16:d3:a1:f6:e9:6b:66:37:fa:2a:54:09:f8:ec:c3:a7:1f:
5e:93:85:93:d5:e9:28:47:28:e3:5d:ae:7c:5d:64:60:e3:a9:
fc:1f:c6:dd:dc:7f:df:f9:70:9f:57:97:c3:10:eb:30:98:e5:
51:50:84:df:2e:b1:67:c9:58:73:d2:fb:3e:09:1f:35:ce:6b:
0c:c0:78:0a:d6:66:c6:fa:2c:bd:89:fc:e8:d4:4c:45:82:8f:
f6:e2:20:81:61:0f:a4:37:48:d5:28:6f:bf:7f:e8:f2:14:c0:
f7:57:66:af:a7:0a:cd:c7:92:1d:61:ff:2e:87:f0:07:53:38:
19:27:a8:79:df:8b:b1:95:2e:6b:46:3e:f5:d1:08:a7:f0:c8:
19:39:20:07:48:05:6a:92:9f:d2:11:76:cf:7f:50:82:28:0e:
f0:b7:aa:5b:d0:b8:39:b1:6e:c9:25:b5:0c:5f:68:3f:f8:84:
95:7d:db:d3:c7:4c:70:58:cb:e4:4e:3f:c4:40:1e:9a:79:24:
e1:d9:99:43:b6:7f:d1:b0:ab:42:b7:2d:5c:7b:96:44:7e:bb:
ff:05:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:48:04 2026 by rpki-client